MY
Database
MySQL
1,327
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 43Medium 450Low 0
Watch
Add MySQL to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-21310 | 6.3 | Jan 19 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: 7.4.0 through 7.4.34; 7.5.0 through 7.5.24; 7.6.0 through 7.6.20; 8.0.0 through 8.0.27 |
| CVE-2022-21309 | 6.3 | Jan 19 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: 7.4.0 through 7.4.34; 7.5.0 through 7.5.24; 7.6.0 through 7.6.20; 8.0.0 through 8.0.27 |
| CVE-2022-21308 | 6.3 | Jan 19 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: 8.0.0 through 8.0.27 |
| CVE-2022-21307 | 6.3 | Jan 19 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: 7.4.0 through 7.4.34; 7.5.0 through 7.5.24; 7.6.0 through 7.6.20; 8.0.0 through 8.0.27 |
| CVE-2022-21290 | 6.3 | Jan 19 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: 8.0.0 through 8.0.27 |
| CVE-2022-21289 | 6.3 | Jan 19 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: 7.4.0 through 7.4.34; 7.5.0 through 7.5.24; 7.6.0 through 7.6.20; 8.0.0 through 8.0.27 |
| CVE-2022-21288 | 6.3 | Jan 19 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: 7.4.0 through 7.4.34; 7.5.0 through 7.5.24; 7.6.0 through 7.6.20; 8.0.0 through 8.0.27 |
| CVE-2022-21287 | 6.3 | Jan 19 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: 7.4.0 through 7.4.34; 7.5.0 through 7.5.24; 7.6.0 through 7.6.20; 8.0.0 through 8.0.27 |
| CVE-2022-21286 | 6.3 | Jan 19 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: 7.4.0 through 7.4.34; 7.5.0 through 7.5.24; 7.6.0 through 7.6.20; 8.0.0 through 8.0.27 |
| CVE-2022-21285 | 6.3 | Jan 19 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: 7.4.0 through 7.4.34; 7.5.0 through 7.5.24; 7.6.0 through 7.6.20; 8.0.0 through 8.0.27 |
| CVE-2022-21284 | 6.3 | Jan 19 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: 7.4.0 through 7.4.34; 7.5.0 through 7.5.24; 7.6.0 through 7.6.20; 8.0.0 through 8.0.27 |
| CVE-2022-21280 | 6.3 | Jan 19 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: 7.4.0 through 7.4.34; 7.5.0 through 7.5.24; 7.6.0 through 7.6.20; 8.0.0 through 8.0.27 |
| CVE-2022-21279 | 6.3 | Jan 19 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: 7.4.0 through 7.4.34; 7.5.0 through 7.5.24; 7.6.0 through 7.6.20; 8.0.0 through 8.0.27 |
| CVE-2020-2768 | 6.3 | Apr 15 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: 7.3.0 through 7.3.28; 7.4.0 through 7.4.27; 7.5.0 through 7.5.17; 7.6.0 through 7.6.13; 8.0.0 through 8.0.19 |
| CVE-2017-3291 | 6.3 | Jan 27 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging) Affected: 5.5.0 through 5.5.53; 5.6.0 through 5.6.34; 5.7.0 through 5.7.16 |
| CVE-2019-2969 | 6.2 | Oct 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Client programs) Affected: 5.6.0 through 5.6.44; 5.7.0 through 5.7.26; 8.0.0 through 8.0.16 |
| CVE-2021-2307 | 6.1 | Apr 22 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Packaging) Affected: 8.0.0 through 8.0.23 |
| CVE-2016-0640 | 6.1 | Apr 21 | Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before… Affected: 5.5.0 through 5.5.47; 5.6.0 through 5.6.28; 5.7.0 through 5.7.10 |
| CVE-2024-21166 | 5.9 | Jul 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 8.0.0 through 8.0.36; 8.3.0 |
| CVE-2023-21875 | 5.9 | Jan 18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption) Affected: 8.0 through 8.0.31 |
| CVE-2022-21352 | 5.9 | Jan 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 8.0.0 through 8.0.26 |
| CVE-2021-2356 | 5.9 | Jul 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication) Affected: 5.0.0 through 5.7.34; 8.0.0 through 8.0.25 |
| CVE-2021-2011 | 5.9 | Jan 20 | Vulnerability in the MySQL Client product of Oracle MySQL (component: C API) Affected: 5.7.0 through 5.7.32; 8.0.0 through 8.0.22 |
| CVE-2020-1971 | 5.9 | Dec 8 | The X.509 GeneralName type is a generic type for representing different types of names Affected: through 8.0.22 |
| CVE-2020-2804 | 5.9 | Apr 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Memcached) Affected: 5.6.0 through 5.6.47; 5.7.0 through 5.7.29; 8.0.0 through 8.0.19 |
| CVE-2020-2574 | 5.9 | Jan 15 | Vulnerability in the MySQL Client product of Oracle MySQL (component: C API) Affected: 5.6.0 through 5.6.46; 5.7.0 through 5.7.28; 8.0.0 through 8.0.18 |
| CVE-2020-2573 | 5.9 | Jan 15 | Vulnerability in the MySQL Client product of Oracle MySQL (component: C API) Affected: 5.7.0 through 5.7.28; 8.0.0 through 8.0.18 |
| CVE-2020-2570 | 5.9 | Jan 15 | Vulnerability in the MySQL Client product of Oracle MySQL (component: C API) Affected: 5.7.0 through 5.7.28; 8.0.0 through 8.0.18 |
| CVE-2018-3123 | 5.9 | Apr 23 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: libmysqld) Affected: 5.6.0 through 5.6.42; 5.7.0 through 5.7.24; 8.0.0 through 8.0.13 |
| CVE-2018-0735 | 5.9 | Oct 29 | Timing attack against ECDSA signature generation Affected: through 5.6.42; 5.7.0 through 5.7.24; 8.0.0 through 8.0.13 |
| CVE-2018-3144 | 5.9 | Oct 17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Audit) Affected: 5.7.0 through 5.7.23; 8.0.0 through 8.0.12 |
| CVE-2018-2761 | 5.9 | Apr 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs) Affected: 5.5.0 through 5.5.59; 5.6.0 through 5.6.39; 5.7.0 through 5.7.21 |
| CVE-2016-3588 | 5.9 | Jul 21 | Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote authenticated users to affect integrity and availability via vectors related to Server: InnoDB Affected: through 5.7.12 |
| CVE-2015-3152 | 5.9 | May 16 | Oracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3, and MariaDB before 5.5.44 use the --ssl option to mean that SSL is optional, which allows… Affected: through 5.7.2 |
| CVE-2016-2047 | 5.9 | Jan 27 | The ssl_verify_server_cert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10; Oracle MySQL 5.5.48 and earlier, 5.6.29 and… Affected: 5.5.0 through 5.5.48; 5.6.0 through 5.6.29; 5.7.0 through 5.7.11 |
| CVE-2026-34318 | 5.8 | Apr 21 | Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client) Affected: 8.0.0 through 8.0.45; 8.4.0 through 8.4.8; 9.0.0 through 9.6.0 |
| CVE-2017-3265 | 5.6 | Jan 27 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging) Affected: 5.5.0 through 5.5.53; 5.6.0 through 5.6.34; 5.7.0 through 5.7.16 |
| CVE-2025-50085 | 5.5 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 8.0.0 through 8.0.42; 8.4.0 through 8.4.5; 9.0.0 through 9.3.0 |
| CVE-2024-21163 | 5.5 | Jul 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: 8.0.0 through 8.0.37; 8.4.0 |
| CVE-2024-20969 | 5.5 | Jan 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL) Affected: 8.0.0 through 8.0.35; 8.1.0 through 8.2.0 |
| CVE-2024-20967 | 5.5 | Jan 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication) Affected: 8.0.0 through 8.0.35; 8.1.0 through 8.2.0 |
| CVE-2023-21880 | 5.5 | Jan 18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 8.0.0 through 8.0.31 |
| CVE-2023-21877 | 5.5 | Jan 18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 8.0 through 8.0.31 |
| CVE-2022-21479 | 5.5 | Apr 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: 8.0.0 through 8.0.28 |
| CVE-2022-21478 | 5.5 | Apr 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: 8.0.0 through 8.0.28 |
| CVE-2022-21425 | 5.5 | Apr 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL) Affected: 8.0.0 through 8.0.28 |
| CVE-2021-22570 | 5.5 | Jan 26 | Nullptr dereference when a null char is present in a proto symbol Affected: through 8.0.28 |
| CVE-2022-21378 | 5.5 | Jan 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: 8.0.0 through 8.0.27 |
| CVE-2022-21367 | 5.5 | Jan 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Compiling) Affected: 5.7.0 through 5.7.36; 8.0.0 through 8.0.27 |
| CVE-2022-21301 | 5.5 | Jan 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML) Affected: 8.0.0 through 8.0.27 |
The 500 most important CVEs for this product (exploited first, then by severity)
